Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e203634313631.roa
File:                     3230302e32362e3139312e302f32342d3234203d3e203634313631.roa (raw, json)
Hash identifier:          H+3fPb1aZ1im5/guMO7Te2ueR24Kkv88QTPjlxPFxh0=
Subject key identifier:   78:43:61:BA:3A:56:41:33:FC:55:D8:C1:F8:C1:96:7A:EB:6C:23:12
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       520DED8E735B9484D741A8B95A60DD5F5B69EB14
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e203634313631.roa
Signing time:             Tue 21 Oct 2025 12:40:00 +0000
ROA not before:           Tue 21 Oct 2025 12:35:00 +0000
ROA not after:            Tue 20 Oct 2026 12:40:00 +0000
asID:                     64161
IP address blocks:        200.26.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:ed:8e:73:5b:94:84:d7:41:a8:b9:5a:60:dd:5f:5b:69:eb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Oct 21 12:35:00 2025 GMT
            Not After : Oct 20 12:40:00 2026 GMT
        Subject: CN=784361BA3A564133FC55D8C1F8C1967AEB6C2312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:b2:54:ec:66:c0:f1:3f:19:1e:0d:2e:50:
                    c6:35:35:e9:31:19:f5:f8:22:b6:2c:9c:c3:1c:f2:
                    ed:c3:c7:ef:f1:ab:3f:e8:54:2a:d7:d0:d7:ab:34:
                    38:e6:6f:9b:65:fd:be:05:73:d0:bb:90:61:9e:d2:
                    d8:42:74:df:bd:90:39:cf:d2:47:30:79:d6:f3:cb:
                    59:08:b4:9d:19:00:11:1a:a4:0e:24:cb:e6:7f:9b:
                    fa:79:e9:d0:f7:2b:ab:26:f4:fe:62:b1:f1:9b:c4:
                    30:c7:ca:8b:20:73:be:dc:e2:e8:12:74:8d:40:9b:
                    90:c6:d6:a9:3b:4d:6b:c6:cb:9b:13:04:24:14:46:
                    c2:b5:d4:8b:2e:c8:7e:00:2f:8a:fe:cb:d1:2a:a6:
                    d3:c9:9f:76:0b:15:d5:c7:91:54:51:a7:74:28:eb:
                    1e:b8:38:4a:0a:11:ac:ef:c2:6f:49:00:ab:28:ea:
                    68:d6:24:25:45:5c:cf:75:f6:8d:a7:6f:de:d7:fd:
                    0e:d4:01:41:6b:db:82:a4:75:55:5b:8f:2d:39:d6:
                    80:a2:73:d4:35:52:43:30:3d:19:af:26:59:f1:b8:
                    c8:ae:93:48:08:e6:8a:44:e5:69:3b:7a:ea:87:7d:
                    f5:57:5c:88:9d:b7:f7:fa:e2:83:6d:ee:b5:6c:2b:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:61:BA:3A:56:41:33:FC:55:D8:C1:F8:C1:96:7A:EB:6C:23:12
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e203634313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:52:bc:ec:00:42:da:a2:50:27:92:f3:e8:b5:73:a1:9a:d2:
         89:6a:4b:f4:85:66:a2:a8:49:1f:72:36:e0:0f:7a:85:c5:f7:
         2e:49:2a:70:eb:92:97:40:08:4e:44:dc:2f:fd:cd:0e:ec:0b:
         74:03:e7:56:49:ea:3f:45:90:d6:e0:5b:3f:b6:a4:0c:10:a1:
         4b:16:f8:f6:1f:23:df:40:7c:4c:0d:20:41:9f:12:76:71:84:
         01:12:9e:c8:fd:71:4c:3f:00:fe:fb:09:70:03:e7:60:14:ef:
         31:2b:ec:62:79:aa:a6:ac:66:e7:f6:1d:b2:33:9d:93:33:6d:
         6f:d1:ab:c8:a5:5e:b9:b4:da:83:28:1d:a2:8f:f2:db:85:45:
         45:41:0c:74:15:22:83:1e:f8:95:90:21:30:8a:9f:80:f4:13:
         0c:0d:61:bd:54:e6:46:a7:25:43:99:e9:7e:23:eb:88:f6:1d:
         98:5a:7f:60:50:59:2e:6d:28:d5:12:5c:03:53:28:cb:e6:53:
         58:93:0d:39:80:77:b5:e9:6a:7a:7a:ca:21:28:5b:a4:cd:fe:
         1f:25:b9:72:b4:8a:9c:cf:f8:9f:c4:49:8d:1c:d4:ed:0d:bb:
         d4:c0:98:58:9a:4f:b0:39:1b:53:67:e3:62:c3:a3:c2:ce:e4:
         2e:2d:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:47 2025 by rpki-client